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Q \ Abstract 

Deutsch proposed two sorts of models of quantum computers, quantum Turing 
machines (QTMs) and quantum circuit families (QCFs). In this paper we explore the 
computational powers of these models and re-examine the claim of the computational 

,y~ equivalence of these models often made in the literature without detailed investigations. 

For this purpose, we formulate the notion of the codes of QCFs and the uniformity of 
QCFs by the computability of the codes. Various complexity classes are introduced 
for QTMs and QCFs according to constraints on the error probability of algorithms or 

0^ ■ transition amplitudes. Their interrelations are examined in detail. For Monte Carlo 

algorithms, it is proved that the complexity classes based on uniform QCFs are identical 



with the corresponding classes based on QTMs. However, for Las Vegas algorithms, 
it is still open whether the two models are equivalent. We indicate the possibility 
that they are not equivalent. In addition, we give a complete proof of the existence 
of a universal QTM simulating multi-tape QTMs efficiently We also examine the 
simulation of various types of QTMs such as multi-tape QTMs, single tape QTMs, 
stationary, normal form QTMs (SNQTMs), and QTMs with the binary tapes. As 
a result, we show that these QTMs are computationally equivalent one another as 
computing models implementing not only Monte Carlo algorithms but exact (or error- 
free) ones. 

Keywords: Quantum computation; Complexity theory; Quantum Turing machines; Uni- 
form quantum circuit families; Universal quantum Turing machines 

1. Introduction 



In the early 1980's, Feynman |14| suggested that computers based on quantum mechanics 



would carry out computations more efficiently than classical ones, and Benioff PJ started the 
study of quantum mechanical Hamiltonian models of Turing machines. In the late 1980's, 
Deutsch introduced quantum Turing machines (QTMs) |TIJ and quantum circuits |TT 



as 



models of quantum computers. Using Deutsch's models, several results were obtained to 
suggest that quantum computers are more powerful than classical ones || [7|, 12, fJTJ. Even- 



tually, Shor [19 1 found efficient quantum algorithms for the factoring problem and the discrete 



logarithm problem, which are considered to have no efficient algorithms in computational 
complexity theory and applied to public-key cryptosystems. Since then, many experiments 
have been attempted to realize a quantum computer. 

Up to now, the above two models appear to be studied under different objectives. A 
QTM models a programmable computing machine and has been used as a mathematical 
model for studying the efficiency of quantum computation. On the other hand, a quantum 
circuit has been studied mainly as a physical model for realization. Thus, in order to make a 
bridge between these two approaches, it is important to give a detailed comparison of their 
computational powers from a complexity theoretical point of view. 



The existence of a universal QTM was shown first by Deutsch fllCifl . However, his universal 
QTM needs exponential slowdown for simulating QTMs. In 1993, Bernstein and Vazirani 
claimed that there is an efficient universal QTM, and gave a detailed proof in ||. But 
their universal QTM is applicable only to QTMs such that the head must move either to 
the right or to the left at each step (two-way QTMs), and their method cannot afford an 
efficient simulation of a general QTM with its head allowed not to move. Shortly after, 
Yao [53| claimed the existence of a universal QTM simulating general QTMs, with the 



following sketch of the proof: He first shows that there is a quantum circuit simulating a 
given QTM for arbitrary steps, and his universal QTM is designed to carry out each step 
of the computing of the quantum circuit. This sketch also contains the existence of a QTM 
that simulates any quantum circuit implicitly. From the above argument, it is often claimed 
in the literature that quantum circuits and QTMs are computationally equivalent. However, 
from the computational complexity theoretical point of view, the following points are left 
for further investigations. 

In the first place, Yao did not define the uniformity of quantum circuit families (QCFs). 
Since a single quantum circuit has a constant input length, we need to consider families of 
quantum circuits for comparing the computational power of quantum circuits with QTMs. 
From the viewpoint of polynomial complexity, it is well known that Boolean circuit families 
with arbitrary input length should satisfy a uniformity condition, as long as they are compu- 
tationally no more powerful than Turing machines. The uniformity of QCFs was mentioned 
shortly by Ekert-Jozsa |T3) and Shor 0]. As pointed out by Shor, we need to introduce 



a definition of uniformity quite different from Boolean circuit families, because each wire 
has continuously many different states rather than only two in Boolean circuits. Secondly, 
the complexity classes of QCFs have not been defined explicitly. Shor [p(J claimed that 



QTMs and QCFs are equivalent as probabilistic computing models implementing Monte 
Carlo algorithms, but the proof has not been given. Moreover, it has not been discussed 
yet whether two models are equivalent as probabilistic machines implementing Las Vegas 
algorithms or exact algorithms (algorithms which always produce correct answers). In order 
to study these problems, we should set up various complexity classes for QTMs and QCFs 
according to constraints on the algorithms. 

In this paper, we shall introduce the rigorous formulation of uniformity of QCFs and 
investigate the detailed relationship among complexity classes of QTMs and uniform QCFs. 
We introduce the class BUPQC of languages that are efficiently recognized by Monte Carlo 



type uniform QCFs, and show that BUPQC coincides with the class BQP of languages 
that are efficiently recognized by Monte Carlo type QTMs. On the other hand, we show 
that the class ZQP of languages that are efficiently recognized by Las Vegas type QTMs 
is included in the class ZUPQC that are efficiently recognized by Las Vegas type uniform 
QCFs. However, it remains still open whether these models are equivalent as computing 
models implementing Las Vegas algorithms. Moreover, we indicate the possibility that the 
inclusion is proper. 

In addition, we discuss the relationship among various types of QTMs, in particular, single 
tape QTMs and multi-tape QTMs. In the classical case, it is possible to simulate a multi-tape 
Turing machine by a single tape Turing machine with quadratic polynomial slowdown. Multi- 
tape QTMs are indispensable to examine the o(n)-space bounded complexity or count the 
number of steps of a QTM. Thus it is important to investigate the level of the computational 
equivalence of single tape QTMs and multi-tape QTMs. 

We generalize Yao's construction of quantum circuits simulating single tape QTMs to 
multi-tape QTMs and give a complete proof of the existence of a single tape universal QTM 
simulating multi-tape QTMs efficiently. This shows that a multi-tape QTM can be simulated 
with arbitrary accuracy by a single tape QTM with polynomial slowdown. We also examine 
the simulation of various types of QTMs such as multi-tape QTMs, single tape QTMs, 
stationary, normal form QTMs (SNQTMs), and QTMs with the binary tapes. As a result, 
we show that these QTMs are computationally equivalent one another as computing models 
implementing not only Monte Carlo algorithms but exact ones. 

This paper is organized as follows. In section 2 we give definitions on QTMs and explain 
related notions. In section 3, we adapt some of basic lemmas on QTMs given by Bernstein 
and Vazirani || to the present approach. Moreover, we show that QTMs with the binary 
tapes are equivalent to two-way QTMs as computing models implementing exact algorithms. 
In section 4 we show that there is a universal QTM simulating multi-tape QTMs. This section 
also contains the rigorous formulation of quantum circuits. In section 5 we formulate the 
uniformity of QCFs and introduce various classes of languages recognized by QTMs and 
uniform QCFs. We also show that QTMs and uniform QCFs are equivalent as probabilistic 
computing models implementing Monte Carlo algorithms, we indicate the possibility that 
these two models are not computationally equivalent as computing models implementing 
Las Vegas algorithms, and we show that SNQTMs are equivalent to multi-tape QTMs as 
computing models implementing exact algorithms. 

2. Quantum Turing Machines 

In what follows, for any integers n < m the interval {n, n + 1, . . . ,m — l,m} is denoted 
by [n,m]z- A quantum Turing machine (QTM) M is a quantum system consisting of a 
processor, a bilateral infinite tape and a head to read and write a symbol on the tape. We 
refer to Deutsch |H| for the physical formulation of a QTM. The formal definition of a QTM 



as a mathematical structure is given as follows. A processor configuration set is a finite set 
with two specific elements denoted by q and qj, where q represents the initial processor 



configuration and qj represents the final processor configuration. A symbol set is a finite set 
of cardinality at least 2 with a specific element denoted by B and called the blank. A tape 
configuration from a symbol set E is a function T from the set Z of integers to E such that 
T(m) = B except for finitely many mGZ. The set of all the possible tape configurations is 
denoted by E#. The set E# is a countable set. For any T G E#, r G E, and (eZ, the tape 
configuration TJ is defined by 

A Turing frame is a pair (Q, E) of a processor configuration set Q and a symbol set E. In 
what follows, let (Q, E) be a Turing frame. The configuration space of (Q, E) is the product 
set C(Q, E) = Qx E # x Z. A configuration of (Q, E) is an element C = (q, T, £) of C(Q, E). 
Specifically, if g = go and £ = then C is called an initial configuration of (Q, E), and if 
q — qf then C is called a /ma/ configuration of (Q, E). The quantum state space of (Q, E) is 
the Hilbert space TC(Q, E) spanned by C(Q, E) with the canonical basis {\C)\ C G C(Q, E)} 
called the computational basis. A quantum transition function for (Q, E) is a function from 
QxExQxEx [— 1, l]z into the complex number field C. A (single tape) prequantum 
Turing machine is defined to be a triple M = (Q, E, 5) consisting of a Turing frame (Q, E) 
and a quantum transition function S for (Q, S). 

Let M = (Q, E, S) be a prequantum Turing machine. An element of Q is called a processor 
configuration of M, the set E is called the alphabet of M, the function 5 is called the quantum 
transition function of M, and an (initial or final) configuration of (Q, E) is called an (initial 
or final) configuration of M. A unit vector in 7i(Q, E) is called a state of M. The evolution 
operator of M is a linear operator Ms on 7i(Q, E) such that 

M,|g,T,0= E %,T(e),p,r,d)b,T^e + d) 

psQ,r6S,de[-i,i]z 

for all (g, T, £) G C(Q, E). The above equation uniquely defines the bounded operator Ms on 
the space TC(Q, E). A (single tape) prequantum Turing machine is said to be a (single tape) 
quantum Turing machine (QTM) if the evolution operator is unitary. 

A quantum transition function 5 for (Q, E) is said to be two-way if S(p, a, q, r, 0) = for 
any (p, a, q, r) G (Q x E) 2 . A prequantum Turing machine (or QTM) M = (Q, E, S) is said 
to be two-way if 5 is two-way (In M, two-way QTMs are merely called QTMs, and QTMs 
in this paper are called general QTMs). 

The following theorem proved in [I7| characterizes the quantum transition functions that 



give rise to QTMs. The quantum transition function of a two-way QTM satisfies condition 



(c) of Theorem |2.1| automatically. In this case, Theorem |27l] is reduced to the result due to 
Bernstein and Vazirani 0, ||. 

Theorem 2.1. A prequantum Turing machine M = (Q, E, 5) is a QTM if and only if 5 
satisfies the following conditions. 



(a) For any (q, a) G Q x £, 

5Z \s(q,<r,p, T , d )\ 2 = i- 

P eQ,res, de[-i,i]z 

(b) For any (g, er), (g', u') G Q x S wii/i (g, cr) 7^ (g', a'), 

H 5(g',o- / ,p,r,rf)*(5(g,o-,p,r,rf) = 0. 

peQ,re£,de[-i,i]z 

(c) For any (g, a, r), (g', a', r')G(?x E 2 ; 

J2 S(q', a', p, t , d - l)*5(g, cr, p, r, d) = 0. 

peQ,d=0,l 

(d) For any (g, a, r), (g', a', t') e Q x £ 2 ; 

I] 5(g', a, p, t', -l)*5(q, a, p, r, 1) = 0. 
peg 



Ko and Friedman [|T^] introduced the notion of efficiently computable numbers. A real 



number x is polynomial time computable if there is a polynomial time computable function 
such that |0(l n ) -x\< 2~ n and 0(1") G {m/2"| m G Z} for any n G N. We denote by PR 
the set of polynomial time computable real numbers and let PC = {x + y\f—\\x,y G PR}. 
We say that a QTM M = (Q, E, 0") is in PC if the range of 5 is included in PC. In this paper, 
we define a QTM to be with amplitudes in C, since in section 5 we investigate QTMs with 
amplitudes in C as a mathematical object. However, from the complexity theoretical point 
of view, we need to require that QTMs are in PC as defined by Bernstein and Vazirani 0. 
When we consider a universal QTM in section 4, we also restrict the QTMs given as the input 
of the universal QTM to QTMs in PC, since not every QTM can be (efficiently) encoded 
with absolute accuracy by classical means. We now define the code c(x) of an element x in 
PR by the code of a polynomial time bounded deterministic Turing machine computing one 
of its rational approximations, and define the code of an element z = x + yy/—T in PC by 
c(z) = (c(x),c(y)). Then the QTMs in PC can be easily encoded: we define the code of a 
QTM M = (Q, S, 5) in PC to be the list of the codes of elements <5(g, a, p, r, d) in PC, where 
(q,a,p,r,d) GQxExQxEx [-1, l] z . 

A finite string from a symbol set £ is called a S-string. The length of a S-string x is 
denoted by \x\ and the set of all the possible S-strings is denoted by E*. A tape configuration 
T from E is said to represent a E-string x — Co ■ • • o~k-i of length k, if T satisfies 



T(m) 



if m G [0,/c- l] z , 
otherwise. 



In what follows, we denote by tape[x] the tape configuration representing x. 

For symbol sets Ei, . . . , £& with the blanks B\, . . . , B^, the product set E = Ex x • • • x £ fc 
can be considered as a symbol set with the blank B = (Bi, . . . , B^). The projection from 



E to Ej is denoted by 7Tj. If Si — an ■ ■ ■ a n i is a Ej-string of length n for i = 1, . . . , k, the 
E-string (o"n, . . . , a\k) • • • (c nl , . . . , a n k) is also denoted by (si, . . . , s^). A k-track QTM is 
such that the alphabet E is factorized as E = Ei x • ■ ■ x Ej. with symbol sets Ei, . . . , E&. 
The symbol set Ej is called the i-th track alphabet of this QTM. If the tape configuration 
is T, the i-th track configuration is defined as the function T % = tt^T E Ej , so that we 
have T(m) = (^(m), . . . ,T k (m)) for any m E Z. For i — 1, . . . , j, let Sj be a Ej-string of 
length at most n and Sj5 n ' be the Ej-string SiBB ■ ■ ■ B of length n. Then, tapejsi, . . . , s 3 ] 
abbreviates tape[(siB ni , . . . , Sj B n \ B n , . . . , B n ) ]. 

v 

fc-j 
Let a symbol set E be decomposed as E = E x x ■ ■ ■ x E&. The quantum state space 

H(Q, E) can be factorized as H(Q, E) = W(Q) ® 7i(E # ) <g> W(Z) or H(Q, E) = W(Q) ® 
W(£f ) ® • • • ® W(Ejf ) ® W(Z), where W(Q), 7i(E # ), W(Ef ), and H(Z) are the Hilbert 
spaces generated by Q, E#, E* and Z, respectively. Then, the computational basis state 
\q,T,£) can be represented as \q,T,£) = \q)\T)\£) or \q,T,£) = I^T 1 ) ■ ■ ■ |T fc )|£) by the 
canonical bases {\q)\ q E Q} of H{Q), {\T)\ T E E#} of W(E#), {|T*)| 7* G E#} of ft(Ef), 
and{|£)|£eZ}ofW(Z). 

Let M = (Q, E, 5) be a QTM, and we assume the numbering of Q and E such that 
Q = {<?o, ■ ■ ■ ; ?|Q|-i} an d ^ = {°"0; ■ ■ ■ , o"|S|-i}j where we denote by |X| the cardinality of a 
set X. We define projections E^(qj), E T ^ m \aj) for m E Z, and -E 5 (£) for £ G Z by 

E*{q j ) = \q j )(q j \®I 2 ®h, E f ^\a,)= £ A ® \T)(T\ ® I 3 , £%) = Ii ® I 2 ® |£><£|, 

T(m)=o-j 

where 1%, I 2 , and J 3 are the identity operators on Ti(Q) ,Ti{Yft) , and 7i(Z), respectively. 
Moreover, if M is a fc-track QTM with alphabet E = Ex x • • • x E&, we define a projection 
E^iT 1 ) for T* G Ef where z = 1, . . . , k by 



e t \t) = h ® / 2)1 ® • • • ® /a^x ® |r)(r| ® / 2>i+1 



'2,fc 



where I 2 ,j is the identity operator on 7i(E*). 

A QTM M = (Q, E,<5) is said to be stationary || Definition 3.12], if for every initial 
configuration C, there exists some t G N such that | | J E , ^(0) J E , ^(gy) A7||C) 1 1 2 = 1 and for all 
s < t we have ||^(q , /)M||C)|| 2 = 0. The positive integer £ is called the computation time of 
M for input state |C). Specifically, if \C) = \q Q , tape[x], 0), it is called the computation time 
of M on input x. A polynomial time bounded QTM is a stationary QTM such that on every 
input x the computation time is bounded by a polynomial in the length of x. Moreover, 
let \4>) = J2xez n oc x \qo,t&pe[x],0) for some n E N. Then, if the computation time of M on 
every input x satisfying a x 7^ is t, the state Mg\<f>) is called the output state of M for 
input state |0). A QTM M = (Q,H,5) is said to be in normal form [§, Definition 3.13], 
if 5(qf, a, go, cr, 1) = 1 for any cr G E. In what follows "SNQTM" abbreviates "stationary, 
normal form QTM" . We may consider only SNQTMs without loss of generality to develop 
quantum complexity theory as shown later (Theorem |5.§| ) . 



Finally, we shall give a formal definition of simulation. Let M = (Q, E, 5) and M' = 
{Q', E', 8') be QTMs. Let t be a positive integer and e > 0. Let e : C(Q, E) -► C(Q', E') be 
an injection computable in polynomial time, d : C(Q', E') — > C(Q, E) a function computable 
in polynomial time satisfying d ■ e — id, and / a function from N 2 to N. We say that M' 
simulates M for t steps with accuracy e and slowdown f (under the encoding e and the 
decoding d), if for any C G C(Q, E), we have 



E 

C"eC(Q,S) 



2 






r /(*.rji) 



(C|M,r" El >(C )} 



< e. (1) 



If / depends only on t and Eq. (|I|) is satisfied for £ = 0, we merely say that M' simulates 
M for t steps with slowdown /. In particular, we say that M' simulates M for t steps by a 
factor of s if f(t) = st. 

We have discussed solely single tape QTMs, but our arguments can be adapted easily to 
multi-tape QTMs. We refer to W7\ for the formulation of multi-tape QTMs. 



3. Basic Lemmas for QTMs 

In this section, we present several definitions, lemmas and theorems necessary to prove 
theorems in sections 4 and 5. Except for Lemma |3.2| , they are given by Bernstein and 
Vazirani M and we adapt them to the present approach. We refer to || for these proofs. In 
||, the dovetailing lemma and the branching lemma are given for two-way QTMs, but we 
extend them to general QTMs including multi-tape QTMs. 

Let SCQxS. A complex-valued function 5 on SxQxHx [—1, l]z is unidirectional, if 
we have d = d! whenever S(p, a, q, r, d) and S(p', a', q, r', d') are both non-zero, where q G Q, 
(j), a), (p', a 1 ) G S, r, r' G E, and d, d! G [—1, l]z- A prequantum Turing machine (or QTM) is 
said to be unidirectional if the quantum transition function is unidirectional. This definition 
is a natural extension of the definition of || to the case where the head is not required to 
move. It is easy to see that a unidirectional prequantum Turing machine is a unidirectional 
QTM if it satisfies conditions (a) and (b) of Theorem |2.1| . We can show the following lemma 
for a unidirectional QTM by the similar way to |§. This lemma allows us to extend a 
partially defined unidirectional quantum transition function to characterize a QTM. 

Lemma 3.1. (Completion lemma) Let 5' be a unidirectional function on S xQ x E x 
[— 1, l]z, where SCQxE. Assume that 5' satisfies the following conditions (a) and (b), 

(a) For any (q, a) G S, 

peQ,res,de[-i,i]z 

(b) For any (q,cr), (q',cr') G S with (q,cr) ^ (q',a'), 

E W> a 'i V, r, d)*5'(q } a, p, r, d) = 0. 

peQ,T6S,de[-i,l] z 

7 



Then there is a unidirectional QTM M = (Q,T,,5) such that 5(p, a, q, r, d) = 8'(p, a, q, r, d) 
whenever S'(p, a, q, r, d) is defined. 

As is well-known, any deterministic Turing machine (DTM) M = (Q, E, 8) can be sim- 
ulated by a DTM M' = (Q', {B, 1},5') with slowdown by a factor of [log |E|]. Using the 
completion lemma, we can prove a similar statement for unidirectional QTMs. 

Lemma 3.2. Any unidirectional QTM M = (Q, E, 8) can be simulated by a unidirec- 
tional QTM M' = (Q', {B, 1}, 5') with slowdown by a factor of 3k, where k = [log |E|] . 

Proof. Throughout this proof, we denote by cr ■ ■ ■ Ok-i the binary representation of a G 
E. Let Q' = (Q x {1}) U fljJ=i(Q x {B, lp x {1,2})) U (Q X [1, fc - l] z x {3}). We 
define the function e : C(Q, E) — > C(Q', {B, 1}) such that e(p,T,£) = (p,T,k£), where 
T is the tape configuration from {B, 1} such that T(kj) ■ ■ -T(kj + k — 1) = er • • -crfc-i 
if T(j) = a for any j 6 Z, that is, the function e determines the configuration of M' 
corresponding to a configuration of M. If a state |p, T, £) of M such that T(£) = cr evolves to 
1 5, T^ T , £ + d) with amplitude S(p, a, q, r, d), the corresponding state \p, T, k£) of M' evolves 

to \q,T^ T ,k(l; + d)) with the same amplitude in 3k steps by the following function 5' on 
S=(Q 1 x{B,l})U(Q 2 x{B}). 

(J'((p,<r ,...,or i _i,l),cr i ,(p,cro,...,cr i ,l),S,l) = l (0 < i < A; - 1) (2) 

8'((p, ao, ... , o-fc-i, 1), 6, (g, r , . . ■ , Tfc_i, 2), 6, -1) = <J(p, a, g, r, d) (6 G {£, 1}) (3) 

5'((g, r , ... , r,, 2), 5, (g, r , . . . , r^, 2), r i} -1) = 1 (1 < i < k - 1) (4) 

5'((q,T ,2),B,(q,l,3),T ,d) = l (5) 

5\(q,i,3),T l ,(q,i + l,3),T l ,d) = l (1 < i < k - 1, (g, fc, 3) = (g, 1)). (6) 

Here we put Q 1 = (Uj=o(Q x {S, lp x {1})) U(QxE'x {1}) U (Q x [1,/c - l] z x {3}), 
where E' is the subset of {0, l} fc corresponding to E, we put Q 2 = Uj=i(<5 x {&■> ^Y x {2}), 
and T^ is the tape configuration from {B, 1} defined by 

f(r) ( ) _ / L m mod fc if ^ - m - ^ + fc ~ - 1 ' 
^ 1 T(m) otherwise. 

For any element (p, a, q, r, d) except the elements defined by the above equations, we define 
8'{p, a, q, t, d) = 0. Eq. @ represents the operation of recording the current symbol a 
scanned by the head of M in the processor of M' in k steps. Eq. (|3|) represents the operation 
of transforming the processor configuration p and the symbol a of M recorded in the processor 
of M' to a new processor configuration q and symbol r with amplitude 8(p, a, q, r, d). Since 
M is unidirectional, the direction d in which the head of M moves is uniquely determined 
by q. Eqs. (|j) and (^) represent the operation of writing the symbol string corresponding to 
the new symbol r of M in turn on k cells of M' in k steps. Eq. (||) represents the operation 
of moving the head of M' to the direction d in k — 1 steps. By the above operations, M' 
carries out the operation corresponding to one step of M. 



We can see that the function 5' is unidirectional and satisfies conditions (a) and (b) of the 
completion lemma, so that there exists a quantum transition function that carries out the 
above steps by the completion lemma. It is easy to see that M' simulates M with slowdown 
by a factor of 3k. QED 

Since every two-way QTM is simulated by a unidirectional QTM with slowdown by a 



factor of 5 || Lemma 5.5], Lemma |3.2| implies that any two-way QTM is simulated by a 
unidirectional QTM with the binary tape with slowdown by a constant factor independent 
of the input. 

A reversible Turing machine (RTM) M = (Q, E, 8) with classical transition function 5 
can be canonically identified with the QTM M' = (Q, E, 5') such that the range of 5' is 
{0,1} and that S'(p,a,q,T,d) = 1 if and only if 5(p, a) = (q,r,d) for any (p,o~,q,r,d) e 
QxExQxEx [—1, l] z . We consider that the class of RTMs is a subclass of the class 
of QTMs under this identification. Then, the RTM identified with an SNQTM is called a 
stationary, normal form RTM and we abbreviate it as an "SNRTM" . 

Theorem 3.3. (Synchronization theorem) If f is a function mapping symbol strings 
to symbol strings which can be computed by a DTM in polynomial time and if \f(x)\ depends 
only on \x\, then there is a two-way SNRTM such that the output state for input state 
\qo, tape[x], 0) is \qj, tape[x, f(x)], 0) and whose computation time is a polynomial in \x\. 
Moreover, if f and f~ l can be computed by DTMs in polynomial time and if \f{x)\ depends 
only on \x\, then there is a two-way SNRTM such that the output state for input state 
| go, tape [x], 0) is |g/, tape[/(x)], 0) and that the computation time is a polynomial in \x\. 

Given any QTM M = (Q, E, 5) and any symbol set E', the QTM M(E') = (Q, E x E', 5') 
is called the QTM constructed by the addition of the track (with alphabet E' to M) if for 
any (p, (a, a'), q, (r, r'), d) G (Q x (E X E')) 2 x [-1, l] z , we have 

b*'(p, O, o-'), q, (r, r), d) = S T J,5(p, a, q, r, d), 

where d denotes the Kronecker delta. Given any fc-track QTM M = (Q, Ei x • • • x E&, 5) 
and any permutation it : [l,/e]z — > [l,k]z, the fc-track QTM M' = (Q, E^m x ••• x 
S^),(5') is called the QTM constructed by the permutation -r of the tracks (of M) if for 
any (p, (ow(i), . . . , cr^)), q, (r ff (i), . . . , r^k)), d) G (Q x (E^i) x • ■ ■ x S^^))) 2 x [-1, l] z , we 
have 

#(p, (°"vr(i), ■ • ■ , 0W(fc)), q, (^(l), ■ ■ • , r^j.)), d) = 5{p, (cri, . . . , cr fe ), q, (n, ...,r k ),d). 

Lemma 3.4. (Dovetailing lemma) Fori = 1,2, let M t = (Qj,E,^) be an SNQTM 
with initial and final processor configurations q^o and qij. Then there is a normal form 
QTM M = (Q,Ti,5) with initial and final processor configurations gx,o an d q%j satisfying 
the following condition: If Cq is an initial configuration of Mi, the computation time for the 
input state \C ) of M 1 is s, and M| |Co) = Sres* a T\lij,T,0), then we have 

M||Co) = MlJCo) for t<s, 

M s 6 +t \C ) = Y, a T Mi\<h,o,T,0) for t > 0. 

Tes# 



Such an M is called the QTM constructed by dovetailing Mi and M 2 . 

Even if M is the normal form QTM constructed by dovetailing SNQTMs M x and M 2 , it 
is not always stationary. What conditions ensure that the QTM M is stationary? It is easy 
to see that one of the answers is to satisfy the following conditions (i) and (ii). 

(i) The output state of M 1 for input state \q , tapefrr], 0) is represented by 

J2 Uy\qf,t&pe[y],0) 

yes™ 

for some integer n, where n depends on \x\. 

(ii) M 2 is a stationary QTM such that if the input state is |go, tape[x], 0), the computation 
time for the input state depends only on |x|. 

Condition (i) ensures that all computational basis vectors in the final superposition of 
Mi represent the output strings of the same length, and condition (ii) ensures that if the 
final superposition of M x satisfying condition (i) is given as the initial state of M 2 , every 
computational path of M 2 reaches a final configuration simultaneously. These conditions are 
called the dovetailing conditions. 

Lemma 3.5. (Branching lemma) Let M { = (Qi,E,Si) be an SNQTM for i = 1,2. 
Then there is an SNQTM M = (Q,Ti x {B,l}, 5) satisfying the following condition with 
initial and final processor configurations q and qf. If the initial configuration of Mi is 
Ci = (qi t o,To,0) such that the computation time of Mi for \Cj) is Si and that M|'|Cj) = 
X/re£# oti,r\qi,f,T, 0), then we have 

M^ +4 |g ,(T ,T,),0)= ]T a iiT | g/ ,(T,7;),0), 

Tes# 

where T\ = tape [5] and T 2 = tapefl]. 



Lemma 3.6. (Looping lemma) There are an SNRTM M = (Q, E, 5) and a constant c 
with the following properties. On any positive input k written in binary, the computation time 
of M is t = 0(k\og c k) and the output state of M for the input state \qo,T,0) is \qf,T, 0). 
Moreover, M on input k visits a special processor configuration q* exactly k times, each time 
with its head back in cell 0. That is, there exist some q* in Q and k positive integers t; t < t, 
where i = 1, . . . , k, such that 

||^(g*)^(0)M^|g ,T,0)|| 2 = l and \\E%q*)M s s \q ,T, 0)|| 2 = (s ^ t u . . . ,t k ). 

An RTM M satisfying the above condition is called a looping machine. 

For any real number e > 0, we denote by Acc(e) the least number m satisfying -^ < e. 
For convenience, we define Acc(0) = B. Let C = {a + ib\ a,b G Q}. The code of an m x n 
matrix M = (rriij) with the components in C is defined to be the list of finite sequences of 
numbers ((xn,yn), (x 12 ,yi 2 ), • • • , (xmn,y m n)), where x {j = Re{m i:j ) and y tj = lm(m i:j ). 
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Let 7i be the Hilbert space spanned by the orthonormal system B = {|1), . . . , |n)} and 
C(Tt) be the set of all linear transformations on TC. Let e be a function mapping any 
(U, e) 6 C(TC) x R> to the following finite string e(U,e): if U has the matrix A = (a^) 
with ttij = (i\U\j), then e(U,e) is the code of A' = (oL), where A' is the element of the set 
<Y = {5 = (bij) | % GC, ||A — B\\ < e} chosen uniquely by appropriate means. We call 
e(U,e) the s- approximate code ofU. Let M be a multi-track QTM such that the alphabet 
of each track contains and 1. For some U in C(TC), we say that given the e'- approximate 
code, a QTM M carries out U with accuracy e (in t steps on the first track), if there is a 
unitary transformation U' such that \\U' — U\\ < e and for any \j) & B we have 

n 

Ml\q ,tape[j,e(U,e'),Acc{e)},0) = Y,\Qf,^P4he(U,e'),Ac C (e)],0)(i\U'\j). 

i=\ 



In particular, if e = e' = in the above condition, we merely say that M carries out U (in t 
steps). Analogously we say that M carries out U with accuracy e in t steps on the i-th track 
under appropriate modification of the above definition. 

The following theorem is a restricted version of the unitary theorem found by Bernstein 
and Vazirani ||, but it serves our purpose. 

Theorem 3.7. (Unitary theorem) LetTi be the Hilbert space spanned by the orthonor- 
mal system B = {|l),...,|n)}. Then there is a two-way SNQTM M that for any unitary 
transformation U on 7i, given the 4(10 £ / ^-s n -approximate code, carries out U with accuracy e 

in time polynomial in - and the length of the input on its first track. 



4. Quantum Circuits 

An element of {0, l} m is called a bit string of length m or an m-bit string. For any m-bit 
string x = X\- ■ ■ x m , the bit Xi is called the i-th bit of x. An m-input n-output Boolean gate 
is a function mapping m-bit strings to n-bit strings. An n-input n-output Boolean gate is 
called an n-bit Boolean gate. Suppose that G is an m-input n-output Boolean gate. An 
n-bit string y 1 ■ ■ ■ y n is called the output of G for input x\ • • • x m if G{x\ ■ ■ ■ x m ) = y\ ■ ■ ■ y n . 
A Boolean gate G is said to be reversible if G is a bijection. For example, the Boolean gate 
M 2 (N) that for input xy e {0, l} 2 produces output x(x + y mod 2) e {0, l} 2 is a 2-bit 
reversible Boolean gate called the controlled not gate. The first bit is called the control bit, 
and the second bit is called the target bit. 




— — N — 



Figure 1 : The controlled not gate M 2 (N) 
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To define quantum gates, we shall first introduce the notion of a wire. A wire is an 
element of a countable set of 2-state systems. The set of wires is in one-to-one correspondence 
with the set of natural numbers called bit numbers. Formally, the wire of bit number j is 
represented by the Hilbert space Hj — C 2 spanned by a basis {|0)j, |l)j}, an orthonormal 
system in one-to-one correspondence with {0, 1}. An observable hj = \l)j(l\j in the Hilbert 
space Hj is called a j-th bit observable. Let A = {j 1 , . . . ,j n } C N, where ji < ■ ■ ■ < j n - A 
composite system of n wires with different bit numbers in A is represented by the Hilbert 
space Ha = ®jek^j- m the Hilbert space Ha, the orthonormal system 

{\xi)j 1 ---\x n ) jn \ xi---x n e {0, l} n } 

in one-to-one correspondence with {0, l} n is called the computational basis on A. Henceforth, 
we shall also write \x±, . . . , x n ) = \xi)j 1 ■ ■ ■ \x n )j n . Thus, we obtain 

1 <g) •• -1 <g>hj k <g> 1-- -<g> l|xi,. . . ,x k ,. ■ ■ ,x n ) = x k \xi,. . . ,x k ,. ■ -,x n ). 

An n-bit quantum gate is physically to be interacting n wires such that the state transition 
from the input state to the output state is represented by the time evolution of the composite 
system of the n wires. Formally, for any set A C N, a A-quantum gate is defined to be a 
unitary operator on the corresponding Hilbert space Ha- In particular, a [l,n]z-quantum 
gate is called an n-bit quantum gate. The S-matrix of a A-quantum gate is the matrix 
representing its gate in the computational basis on A. For any A-quantum gate G and any 
unit vectors \ip) and \<p) in Ha, HG\ip) = \<p), the vector |0) is called the output state of G for 
the input state \ip). In particular, if the input state is \ip) = \x± ■ ■ ■ x n ), the bit string X\ ■ • ■ x n 
is called the input of G. Henceforth when no confusion may arise, we usually identify the 
S-matrix of a quantum gate with the quantum gate itself. 

We can represent an n-bit reversible Boolean gate by a 2™ x 2 n orthogonal matrix whose 
entries are equal to zero or one. Thus we may consider an n-bit reversible Boolean gate to 
be a sort of n-bit quantum gate, and consider that the class of reversible Boolean gates is a 
subclass of the class of quantum gates. 

Let it be a permutation on [l,n]z- The permutation operator of it is the operator V n 
on H[i t n] z that transforms \x\ ■ ■ ■ x n ) to la^i), . . . ,x n ( n )) for any n-bit string x\ ■ ■ ■ x n . For 
any finite set A, we denote by Ia the identity operator on Ha = ®\eA^\- F° r an Y ^-bit 
quantum gate G, the n-bit extension of G is the n-bit quantum gate G ® I[ m+ i >n ] z denoted by 
G[n], where m <n. For any set Q of quantum gates, an n-bit quantum gate G is said to be 
decomposable by Q if there are ra^-bit quantum gates Gi in Q with n-i < n and permutations 
7Tj on [l,n]z satisfying 

G = U 1 ---U m , where U t = V^G % [n\V^ (7) 

for % — 1, 2, . . . , m. In this case, G is also said to be decomposable by m gates in Q. The least 
number of such m is called the size of G for Q. For any e > 0, we say that G is decomposable 
by Q with accuracy e, if \\G — U\ • • • U m \\ < e is satisfied instead of Eq. (0). 
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A universal set is a set of quantum gates by which any quantum gate is decomposable 
with any accuracy. An elementary gate is an element of a given universal set. Henceforth, 
R\,6i R-2,6, and R^fi denote the 1-bit quantum gates whose S-matrices are given as follows. 









1-3,0 - 

Barenco et al. proved that any quantum gate is decomposable by the infinite set 

g u = {R lfi ,R2,8,R3,8,M 2 (N)\ 9 G [0,2tt]}. 
as follows. 

Theorem 4.1. Any n-bit quantum gate G is decomposable by at most 0(n 3 2 2n ) quantum 
gates in Q u . 

Thus, Q u is a universal set. In what follows, the size of a quantum gate for Q u is merely 
called the size of the quantum gate. 

We shall now consider a finite universal set. Henceforth, TZ denotes a polynomial time 
computable real 27rX)£i 2~ 2 \ The following lemma was obtained essentially by Bernstein 
and Vazirani |Q. 

Lemma 4.2. For any 9 G [0,27r] and e > 0, there is a non-negative integer k < 0{\) 
such that \klZ — 9\ (mod 2tt) < e. Moreover, there is a DTM which produces on input 
9 G PR and Accfe) a non-negative integer k < O(-j) satisfying the above inequality in time 
polynomial in the length of the input. 

Henceforth, Q-ji denotes the finite set of quantum gates defined by 

oo 

Gn = {Ri,n,R2,K,R3,K,M 2 (N)\ K = 2tt]T2- 21 }. 

i=\ 

Since any 1-bit quantum gate in Q u is decomposable by Qu with any accuracy by Lemma 
[L2"| , the set Gn is a universal set. In what follows, the size of a quantum gate for Gn is called 
the Gn-size of the quantum gate. 

An n-bit quantum circuit consists of quantum gates and wires, and represents how those 
gates are connected with some of those wires. Formally, it is defined as follows. Let G 
be a set of quantum gates. An n-bit quantum circuit K based on G is a finite sequence 
(G m , 7r m ), . . . , (Gi, 7i"i) such that each pair (G», 7r») satisfies the following conditions. 

(1) Gi is an n-j-bit quantum gate in G with ni < n. 

(2) 7Tj is a permutation on [1, n]z- 

In this case, we say that the wire of bit number vtj(j), where j < n i; is connected with the 
j-th pin of G{. The positive integer m is called the size of K for G- In particular, the size 
of K for G u is merely called the size of K and the size of K for Gn is called the G^-size 
of K. The unitary operator U m ■ ■ -Ui, where Ui = V^.Gi[n]V 7Ti for i G [l,m]z, is called the 
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n-bit quantum gate determined by K and denoted by G(K). From the definition, the size 
of G(K) for Q is at most the size of K for Q. Suppose that K 1 = (G m ,w m ), . . ., (Gi,iti) 
and if 2 = (GJ,7r(), . . . , {G' l , / K 1 ^) are n-bit quantum circuits based on Q. Then if 2 o K\ = 
(G[, 7r[), . . . , (G[, tt[), (G m , 7T m ), . . . , (Gi, 7Ti) is called the concatenation of K\ and K 2 , and 
if" = K i o ■ ■ ■ o K i is called the concatenation of n ifi's. 

n 

Next, we define /c-input m-output quantum circuits. A A;-input m-output n-bit quantum 
circuit is physically to be an n-bit quantum circuit based on a set of quantum gates; its 
input is a fc-bit string and a constant (n — fc)-bit string, and its output is the m-bit string ob- 
tained by measuring the bit observables of specified m wires after the unitary transformation 
determined by the circuit. 

Formally, a k-input m- output n-bit quantum circuit K is a 4-tuple (if, A 1? A 2 , S) satisfying 
the following conditions. 

(1) if is an n-bit quantum circuit. 

(2) A x and A 2 are two subsets of [l,n] z satisfying |Ai| = k and |A 2 | = m, respectively. 

(3) S is a function from [l,n] z \ Ai to {0, 1}. 
Henceforth, we write bj = S(j) for any j e [l,n]z \ Ai. 

Let K = (K,Ai,A 2 ,S) be a /c-input m-output n-bit quantum circuit, where Ai = 
{ji, ■ ■ ■ ,jk} and A 2 = {ii, . . . ,i m }, and let u = U\---u n be the n-bit string satisfying 
Uj 1 = xi, . . . , Uj k = Xk for a fc-bit string x — x\ • ■ • Xk and Uj = bj for all j G [1, n]z \ Ai. In 
what follows, the n-bit string u obtained by such construction is denoted by u(x, K). Let 
\4>) be the output state of G(K) for input u(x, K). If the bit observables n^, . . . ,n irn are 
measured simultaneously in the output state \<f>), and the outcomes of these measurements 
are yi, . . . , y m , then the bit string y — y\ ■ ■ • y m is considered as the output of K for input x. 
From the statistical formula of quantum physics, the probability p K (y\x) such that y is the 
output of K for input x is represented by 

p K {y\x) = (u(x,K)\G(K^E tl ( yi )---E lm (y m )G(K)\u(x,K)), 

where Ei p (y p ) is the spectral projection of 1 <g> • • • 1 <S>fii <8) 1 • • -<g> 1 pertaining to its eigenvalue 
y p . We can consider that K associates each /c-bit string x with the probability distribution 
p K (-\x) on {0, l}" 1 . The distribution p K (-\x) is called the output distribution for x determined 
by K. Henceforth, when no confusion may arise, we shall identify K with K. 

Now, we shall give the notion of a simulation of a QTM by a quantum circuit. The 
total variation distance between two distributions D and V over the same domain I is 
Y^iei \T^(i)~ ^'(*)|- ^ quantum circuit K will be said to t-simulate a QTM M — (Q,H,S) with 
accuracy s, if the following holds for any E-string x. Let T> be the probability distribution 
of the outcomes of the simultaneous measurement of the tape cells from cell —t to cell t 
after t steps of M for input state \q , tape [a;], 0). Let V be the probability distribution of 
the S-string obtained by decoding the output of K for the input of the bit string obtained 
by encoding x. Then the total variation distance between T> and T>' is at most e. Formally, 
it is defined as follows. 

Let e : E — > {0, 1} A , where A = [log |E|] , be an injection computable in polynomial time, 
and let d : {0, 1} A — *■ E be a function computable in polynomial time such that d-e = id. For 
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any E-string x — X\ ■ ■ • x k , positive integer t and bit string z — Z\ ■ • ■ Z2t+i, where Zi G {0, 1} A , 
we define the encoding function e t : E* — > {0, l}( 2i+1 ) A by 



e t (xi---x k 



e(B) ■ ■ ■ e(B) e(xi) • ■ • e(x k ) e(B) ■ ■ ■ e(B) if t + 1 > k, 

N / N / 

t t+l-fe 

e(-B) ■ • ■ e(B) e{x x ) ■ ■ ■ e(x t+1 ) if t + 1 < k, 



and define the decoding function d t : {0, 1}( 2<+1 ) A — > £ 2<+1 by 

d t {zi ■ ■ ■ z 2 t+i) = d(zi) ■ ■ ■ d(z 2t +i)- 

Then a ((2£ + l)A-input (2t + l)A-output) quantum circuit K is said to t- simulate a QTM 
M = (Q, E, <5) with accuracy e (under the encoding et and the decoding dt), if for any S-string 
x, we have 



E K(^)-p*(yk) 



<£, 



where 



~P K (y\x) 



pf{y\x) = (q ,t a pe[x],0\{M t s yE M ^t{y 1 ) ■ ■■E M)t (y 2t+1 )M t s \q o ,tape[x],0). 
When e = 0, the quantum circuit K is merely said to t-simulate the QTM M. 



Yao [33J discussed the simulation of a QTM by a quantum circuit under a similar but 
different formulation. He showed that given a QTM M = (Q, E, 5) and positive integers t 
and n, there is an n-input quantum circuit that simulates M for t steps on any input of 
M with length |~n/|~log|E|~|] and that its "size" (the "size" is the number of Deutsch gates 
[11 1 constructing the circuit) is at most some fixed polynomial in t and n. Our formulation 
requires that a quantum circuit simulate a QTM M on every input of M and we shall 



extend quantum circuits used by Yao [|4[] to those which can simulate multi-tape QTMs. In 
addition, we shall construct a quantum circuit based on Q u instead of Deutsch gates in order 
to take advantage of this simulation later. 

Theorem 4.3. Let M = (Q, E, 8) be a k-tape QTM, and let t E N. Then, there is a 
quantum circuit of size 0(t k+1 ) that t-simulates M. 

Proof. We consider the case where M is a single tape QTM. See appendix A for the 
generalization to multi-tape QTMs. We shall construct a quantum circuit Kg which t- 
simulates M. The quantum gate determined by Kg is connected with l + (2t + 1)1 wires, 
where Zo — R°g \Q\~\ an d 1 = 2+ [log |E|] . We divide their wires into a part consisting of the 
first Iq wires and 2t + 1 parts which are respectively consisting of / wires. The part consisting 
of the first Iq wires represents the processor configuration of M. This set of wires is called 
cell 'P' of Kg. The state of cell P of Kg is represented by a unit vector in the Hilbert space 
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spanned by the computational basis {\q)}, where q G {0, 1}°. For j G [0, 2t]z, the wires of 
bit numbers l + jl + 1, . . . , l + jl + I represent the symbol in the (j — t)-th cell of M and 
whether the head scans this cell or not. This set of wires is called cell j — t of Kg. For 
i G [— t, t]z, the state of cell i of Kg is represented by a unit vector in the Hilbert space 
spanned by the computational basis {|o"jSj)}, where <Tj G {0, l}r io gl s ll anc | s . ^ jo, l} 2 . 

Next, we define quantum gates G\ and G 2 , two types of components of Kg. In what 
follows, p,q, . . . denote binary strings representing elements of Q, the symbols a, r, . . . denote 
binary strings representing elements of E, and s — 0, 1, 2 denote 00,01,10, respectively. Then 
we denote the computational basis state \qaiS\a 2 s 2 ■ ■ -UkSk) on the set [l,lo + kl]z of bit 
numbers by \q; a±si] a 2 s 2 ; • ■ ■ ', OfcSfc). Now G\ is an (Z + 3/)-bit quantum gate satisfying the 
following conditions (i) and (ii). 

(i) G^Wp^^s) = \v p>(Tl!(Ti(T3 ) , where 

|«Vi,<t,<t 3 ) = |p;o"i0;al;o- 3 0), 

l v j»,<n,«r,«T3> = J2 5 (Pi a > Qi r ' _1 ) l?5 a i2; r Q; °" 3 o) + J2 s & a > <?, r ' °) Is; °"i0; r 2; ^o) 

+ H S (p, <?, Q, t, l)\q; o-iO; r0; a 3 2) 

9,7" 

for any (p, <7i, cr, cr 3 ) G Q x E 3 ; the summation £) g T is taken over all (q, r) G Q x E. 

(ii) Gi|/i) = \h) for each vector |/i) in the subspace H of C 20 spanned by three types 
of vectors: 

(1) |g;o-iSi;<7 2 s 2 ;o"3.S3), 

where s 2 7^ 1 and none of Si, s 2 , s 3 are equal to 2; 

( 2 ) I m jL<x 2 , CT3 ) = £ g ,r S(p, a, q, r, 0) |g; r2; a 2 0; a 3 0) + E q , T S(p, a, g, r, 1) \q; rO; cx 2 2; cr 3 0) ; 

(3) |uJ,«r,T„xi,0a,«s) =E«gQ*(p,<r,g,r,l)|g;<T 1 2;(T20;a-30). 

Let J¥ = {Ityp.ff.ffLffs)! (P> cr, 0-1,0-3) G Q x E 3 }^- 1 and V = {\v P!<T)trutT3 )\ (p, a, a l7 a 3 ) G 
Q x E 3 }- 1 - 1 -, where S x denotes the orthogonal complement of a set S so that S-*- 1 - denotes 
the subspace generated by S. By Theorem ^J] the subspaces VF, V and if are all orthogonal 
one another and it is verified that { \v Pt<T>(ru ff3 )} is an orthonormal system of V. Thus, there 
exists a quantum gate G\ satisfying the above condition. Let G 2 be an (7 + (2£ + l)/)-bit 
reversible Boolean gate which changes all Si — 2 to Si — 1. 

Henceforth, given any m G [1, It + l]z, we say that an (l + m/)-bit quantum gate G is 
connected with cells ii, . . . , i m , where i\ < • ■ ■ < i m , if each jo-th pin of G, for j G [1, /o]z, 
and each (7 + jl — I + k)-ih pin of G, for j G [1, m]z, k G [1, Z]z, are respectively connected 
with the wires of bit numbers j and l + (ij + t)l + k. Now let Kg be the quantum circuit 
based on Q = {G\,G 2 } constructed as follows. First, 2t — 1 Gi's are connected in such a 
way that for j G [1, 2t — l]z the j-th G\ is connected with cells j — t — 1, j — t and j — t + 1. 
The (7 + (2t + l)/)-bit quantum circuit constructed from these Gi's is called K\. Lastly, G 2 
is connected with cells —t, —t + 1, ... ,t. The (7 + (2t + l)/)-bit quantum circuit constructed 
from this G 2 is called K 2 . Let Kg = [K 2 ° Kxf- The quantum circuit K 2 o K 1 is illustrated 
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in Figure 2. From the definitions of G\ and G 2 , it can be verified that Kg carries out the 
operation corresponding to one step of M as follows. 



Go 



Gil 
Gil 



cell P -t -t + 1 t - 1 t 

Figure 2 : The quantum circuit K 2 o K\ based on Q 



If the state of M after t' steps with t' < t is |p, T, z) with T(z') 
(i' + l)-th i^ 2 o K x is 



cr, the input state of the 



\p; T(-t)0; ■■■;T(i- 1)0; r(z)l; r(z + 1)0; • • • ; T(t)0). 

From condition (ii-1) of Gi, this state does not change until z'-th G\ is carried out. When 
z'-th Gi is carried out, from condition (i) of G\ this state is transformed into 

E q , T 6(p, a, q, r, -l)|g; T(-t)0; • • ■ ; T(i - 1)2; r0; T(z + 1)0; ■ • • ; T(t)0) 
+ E g , T 5(p, ^, q, r, 0) |g; T(-t)0; • • • ; T(z - 1)0; r2; T(z + 1)0; • • • ; T(t)0) 
+ E 9 , r <J(p, a, g, r, l)|g; T(-t)0; • • • ; T(i - 1)0; r0; T(z + 1)2; • • • ; T(t)0). 

By condition (ii) of Gi this state does not change until K2 is carried out. Finally, from the 
definition of G2, the state after passing K 2 in the ii! + l)-th K 2 o K\ is transformed into 

E q , T S(p, a, q, r, -1)|?; T(-t)0; • • • ; T(i - 1)1; rO; T(z + 1)0; • • • ; T(t)0) 
+ E g , T 5(p, ^, ?, r, 0)|g; T(-t)0; • • • ; T(i - 1)0; rl; T(z + 1)0; • ■ • ; T(t)0) 
+ E (? ,^(p,a,?,r,l)|?;T(-t)0;---;T(z-l)0;rO;T(z + l)l;---;T(t)0). 

By the above transformation, it can be verified that K 2 ° K\ simulates the operation of M 
such that "if the processor configuration is p and the head reads the symbol o of cell % after 
i! steps, then the head writes the symbol r, the processor configuration turns to ?, and the 
head moves to d with amplitude 5(p, a, q, r, d)" . 

From Theorem fll] the quantum gate Gi is decomposable by 0(1) gates in Q u . It is easy 
to see that the quantum gate G 2 is decomposable by 0(2t + 1) gates in Q u . Thus there are 
an (7 + 3/)-bit quantum circuit K u \ of constant size and an (Z + (2t + l)/)-bit quantum 
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circuit K Uy2 of size 0(2t + 1) based on Q u such that the quantum gates determined by them 
are G\ and G 2 , respectively. Now let K a be an (Z + (2£ + l)Z)-bit quantum circuit obtained 
by decomposing each G\ in K\ into 0(1) gates in Q u . Then the size of K a is 0(2t + 1). 
Similarly, from K 2 we can obtain an (7 + (2£ + l)/)-bit quantum circuit Kb of size 0(2£ + 1). 
Thus, K = (Kb o K a Y is a quantum circuit of size 0(t 2 ) that t-simulates M. QED 

Let I 7 be a 2 n -dimensional transformation and A = {j l5 . . . ,j n } a set of integers with 
ji < ■ ■ ■ < j n - Then we say that a multi-track QTM M carries out V (with accuracy e) on 
the cell-set A of the i-th track, if M carries out the following algorithm. 

1. For m = 1, . . . , n, the QTM M transfers the symbol written on each cell j m of the i-th 
track to cell m of an empty extra track. Henceforth, let this extra track be the k-th track. 

2. M carries out V (with accuracy e) on the k-th track. 

3. M transfers the symbol written on each cell m of the k-th track to cell j m of the i-th 
track. 

Now, we give a proof of the existence of a universal QTM that simulates every QTM in 
PC efficiently with arbitrary given accuracy. 

Theorem 4.4. There is a two-way SNQTM M u such that for any positive integer t, pos- 
itive number e, QTM M in PC, and input string x of M, the QTM M u on input (t,e,CM,x) 
simulates M for t steps with accuracy e and slowdown of at most a polynomial in t and -, 
where cm is the code of M. 

Proof. For simplicity, we consider the case where M is a single tape QTM. When M is 
a multi-tape QTM, we can prove this theorem similar to the proof shown in the following 
by using a quantum circuit given in appendix A instead of a quantum circuit given in the 
proof of Theorem |4.3| . 

In what follows, we shall construct a multi-track QTM M u = (Q u , S u , 5 U ) that simulates 
M for t steps with accuracy e for any given t, e, and M. The input of M u consists of the 
input x of M, the desired number of steps t, the desired accuracy e, and the code of M. 
Henceforth, we fix t, e, and M. In this proof, we shall use the same notations as in the proof 
of Theorem [4.3| . By the proof of Theorem |4l| there is a quantum circuit Kg = (K 2 o Ki) 1 
based on Q = {G\, G 2 } that t-simulates M. The QTM M u has six tracks and the alphabet of 
each track contains and 1. The first track of M u will be used to represent the computation 
of Kg approximately. The second and the third track of M u will be respectively used to 
record an approximate code of G\ and Acc(e). The fourth track of M u will contain counters 
C and C\. The values of C and C\ count the numbers of subcircuits of the form K 2 o K\ 
and G\ in Kg which have been carried out so far, respectively. The fifth track of M u is used 
to record the input of M u . The sixth track is used as a working track. 

Let k = 2 lo+31 and e' < ^ ,- k . The QTM M u carries out Kg with accuracy e after 

a preparation. The preparation is to compute the e'-approximate code c(Gi) of G\ from cm 
and write c(G\) on the second track of M u , to write Acc(e) on the third track of M u , and to 
write the (Zo+(2t+l)/)-bit string x' = qoT(—t)0 ■ ■ ■ T(0)1 • ■ ■ T(t)0 corresponding to the initial 
configuration |go, tapefx], 0) of M on the first track of M u , where the string x' represents the 



input of Kg. Given cm and a sufficiently small positive number ce', where c depends only 
on k, i.e., \Q\ and |E|, but is independent of t and e, we can compute the e'-approximate 
code of the {k dimensional) S-matrix of G\ in polynomial time in logt and log - by using the 
definition of G\ given in the proof of Theorem [O] and the orthonormalization of Schmidt. 
By the synchronization theorem there is an SNQTM that carries out the preparation given 
above in time polynomial in the length of the input of M u , i.e., a polynomial in t and log -. 

The algorithm for carrying out Kg with accuracy e is as follows. At first, the values of 
counters Co and C\ are zero. 

Step 1. Carry out steps 2-4 until the value of counter Co comes to t. 

Step 2. Carry out steps 2.1 and 2.2 until the value of counter C\ comes to a multiple of 
2£- 1. 

Step 2.1. When the value of C\ is i (mod It — 1), carry out the 2 /o+3Z -dimensional 
transformation G\ with accuracy 4t , 2 £ t-i) on the cell-set [0, l — l]z U [lo + U,Iq + il + I — l]z 
of the first track. 

Step 2.2. Increase the value of counter C\ by one. 

Step 3. Carry out the 2' 0+ ^ 2t+1 '"-dimensional transformation G 2 on the cell-set [0, Iq + 
(2t + 1)1 - l] z of the first track. 

Step 4. Increase the value of counter C by one. 

Since G 2 is a reversible Boolean gate which transforms all s, = 2 to Sj = 1, we can con- 
struct an SNRTM M 2 that carries out step 3 in time polynomial in t by the synchronization 
theorem. We can construct an SNQTM Mi that carries out G\ with accuracy it ,2t-i) in 

time polynomial in *■ ~ ' and |c(Gi)| = 0(k 2 log 4) by the unitary theorem. Moreover, we 
can construct SNQTMs to run counters Cq and C\ by the looping lemma. The QTM M u 
can be constructed by applying the addition of tracks, the permutation of tracks, and the 
dovetailing lemma to the above SNQTMs and the SNQTM that carries out the preparation. 
It is clearly verified that the operation of steps 2-4 corresponds to carrying out K 2 ° K\ 



with accuracy |r by the proof of Theorem [4.3|. Thus if the value of counter Co comes to 



t, then M u carries out the quantum gate determined by Kg with accuracy e (It is known 
that if |||0) — |^)|| < e for two state vectors \(f>), \ip), the total variation distance between 
the probability distributions determined by them is at most 4e ||). Now let go,« an d <?/,« 
be the initial and final processor configurations of M u . Let the encoding e : C(Q, E) — > 
C(Q U ,T, U ) be a function satisfying e(q , tapefx], 0) = (q 0tU ,ta,pe[B, B, B, B, (t, e, cm, %)], 0). 
Let x = XqXi ■ ■ 'X\ x \-\. Let the decoding d : C(Q U , E u ) — >■ C(Q, E) be a function satisfying 
the following condition. For any (T 1 , . . . ,T 6 ) e E* satisfying 

T 1 = tape[gT(-t)0 ■ ■ • T(£)I ■ ■ ■ T(t)0], 

T 2 = tape[c(Ci)], T 3 = tape[Acc(e)], T 5 = tape[(i, e, cm, x)], 

the equation d(qf >u , (T 1 , . . . , T 6 ), 0) = (q, T", ^) holds; the tape configuration T' of M satisfies 

Hie [-t,t] z , 
T'{i) = { Xi if t < \x\ - 1 and i 6 [t + 1, |a;| - l] z , 
otherwise. 
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It is easy to see that M u simulates M for t steps with accuracy e and the computation time 
is bounded by a polynomial in t and -. QED 

Remark 1. Any pair of QTMs dovetailed in the proof of Theorem |4.4j can be constructed so 



that it can satisfy the dovetailing conditions (cf. Lemma |3.3|) . Thus, stationarity is preserved 
by dovetailing them. Indeed, the fact that all QTMs constructed in the proof of Theorem [O] 
satisfy conditions (i) and (ii) of the dovetailing conditions can be verified from the statements 
of the synchronization theorem, the looping lemma, and the unitary theorem. 



Remark 2. Using a universal set different from us, Kitaev [15] and Solovay [22] inde- 
pendently proved lately that there is a quantum algorithm which decomposes a given n-bit 
quantum gate into poly(2 n , log -) elementary gates with accuracy e. Applying this result 
to the proof of Theorem |4.4j , we can replace a polynomial in n and - in the statement of 
Theorem [4.4| by a polynomial in n and log -. 



5. Computational complexity of uniform QCFs and QTMs 

A quantum circuit family (QCF) is an infinite sequence K = {K n } n >! such that K n is an 
n-input (/(n)-output g(n) -bit) quantum circuit. A QCF /C is said to be based on a set Q 
of quantum gates if every K n in K is based on Q. A QCF K is said to be of size s based 
on Q if the size of K„ for Q is sin) for a function s from N to N. If s is a polynomial, it 
is called a polynomial size QCF based on Q. Moreover, if Q = Q u , then K, is merely called a 
polynomial size QCF. For any quantum circuit K, the quantum gate G(K) determined by K 



is decomposable by Q u from Theorem |4.1| . Thus, in what follows, we consider only quantum 
circuits based on subsets of Q u . 

First we define the code of a quantum circuit based on Q-%. Let K = (G m , n m ), . . . , (G±, 7i"i) 
be a quantum circuit based on Q-%. Then the Q-ji-code of K, denoted by c r (K), is defined to 
be the list of finite sequences of natural numbers (e r (Gi), . . . , e r (G m )), where for j e [1, m]z 
we have 

p (r \ j (i,Kj(l)) if Gj = Ri,K, 

er[ ^ } \ (4,7r,(l),7r,(2)) HG 3 = M 2 {N). 

Let K be a fc-input m-output n-bit quantum circuit K = (K, Ai, A2, S) based on Q-n, where 
[l,n]z \ Ai = {ii, . . . ,i n -k} and A 2 = {ji, . . . ,j m }. Then the ^-code of K, denoted by 
c r (K), is defined to be the list of finite sequences of natural numbers, 

C r (K) = (((«!, S(ii)), • • • , (i n -k, S(in-k))),Cr(K), (jl, . . .,j m )). 

Given a QCF K = {K„} n >i of size s based on Q-jz, the QCF /C is said to be Q-n-uniform if 
the function l n *— > c r (K n ) is computable by a DTM in time p(s(n)) for some polynomial p. 
The ^-uniform QCFs are a subclass of the general uniform QCFs to be defined as 
follows. As Shor pointed out in |20|, the entries of the S-matrices of quantum gates in a 



uniform QCF must be polynomial time computable numbers []. It follows that the entries of 

1 Actually, Shor pQ| required that the entries should be computable in the sense that the first n bits 
are computable in time polynomial in n, while we require that the first n bits of a computable number are 
computable in time polynomial in n (cf. Bernstein- Vazirani jqj). 
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elementary gates must be restricted to be polynomially computable ones. Thus it is natural 
to assume that any uniform QCF can be decomposed into the elementary gates in 

Grc = {Rx,e, R2,e, Rs,e, M 2 (N)\ 6 G PC n [0,2tt]}. 

According to the above, we shall give the formal definition of uniform QCFs for QCFs based 
on the set Qpc instead of the universal set Q u . For any 9 G PC, let c{6) be the code of 6. Let 
K = (G m , 7r m ), . . . , (G\, 7Ti) be a quantum circuit based on £pc- Then the code of K, denoted 
by c(K), is defined to be the list of finite sequences of natural numbers (e(Gi), . . . , e(G m )), 
where for j G [1, m]z we have 



e(Gj 



((i,^)),^!)) if G j = R i! e 



l,Vl 



(4,^(1), ^(2)) ifG, = M 2 (7V). 



Similar to the case of the code of a quantum circuit on Q-n, we can define the code of a k- 
input m-output n-bit quantum circuit K based on G?c- Given a QCF /C = {K n }„>i of size 
s based on ^pc, the QCF /C is said to be uniform if the function l n *—>■ c(K n ) is computable 
by a DTM in time p(s(ri)) for some polynomial p. It is easy to see that a (^-uniform QCF 
is uniform. 

As is well-known, the discrete Fourier transform \a) i— > -LE^i) lex P (^r 2 ) l c )> where 
a = 0, . . . , 2 n — 1, plays an important role in Shor's algorithm |i~3| , p0| . It is easy to see that 
the polynomial size QCF /C = {K n } n >i that performs the discrete Fourier transform is such 
that on input 1™ the code of K n 

c(K n ) = (c\A), c 12 ^), c 2 (A), . . . , c ln (£ n _0, . . . , ^-^(50, c n (A)) 

can be computed by a polynomial time bounded DTM, where cP{A) = ((3,c(ir)),j), 
((l,c(7r/4)),j)and 

C v(B k ) = ((3,c(7r/2 fe+1 )),z),((2,c(-7r/2 fc+2 )),j),((3,c(7r/2 fe+2 )),j),(4, i , J ), 
((2,c(7r/2 fe+2 )),j),((3,c(-7r/2 fc+2 )),j),(4,^,j), 

Thus, K is uniform. For example, K4 is the quantum circuit illustrated in Figures 3 and 4. 
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Figure 3 : The quantum circuit K4. In this figure, A = Ri^/4 ■ i?3 l7r , and B k is the 2- 
bit quantum gate determined by the quantum circuit K Bk (Figure 4) based on Q u . The 
S-matrix of B k is diag(l,l,l,exp(|£)), where diag(ai, . . . , a n ) is an n-dimensional diagonal 
matrix whose diagonal components are a±, . . . , a n in this order. 
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Figure 4 : The quantum circuit K Bk . In this figure, R\ )k 
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A formal definition of a simulation of a QCF by a QTM is given as follows. Let M be 
a multi-track QTM such that the alphabet of each track contains and 1. We say that M 
carries out an n-input k-bit quantum circuit K = (K, A 1; A 2 , S) if for every n-bit string x, 
the output state of M for input state \q , tape[x], 0) is 

]T \q f ,t^e[x,y},0}(y\G(K)\u(x,K)}. 

2/6{0,l} fc 

For any function / : N — * N, we say that M simulates a QCF /C = {K n }„>i in time f(n), if 
on every n-bit input string, M carries out K n and the computation time is f{n). Then the 
following lemma holds. 

Lemma 5.1. For any Q-n-uniform QCF JC, there exist a polynomial p and an SNQTM 
M which simulates /C in time p(s(n)) , where s is the size of K,. 

Proof. Let /C = {K n } n >! be a ^-uniform QCF of size s, and let K n = 
(K n , A ljn , A 2 , n , S n ). First, we show that there exists a multi-track QTM M that carries 
out the following steps for input state |go, tape[rr], 0). Throughout this proof, we assume 
that the length of x is n. 

Step 1. Write l n on the third track, c r (K ra ) on the fourth track, and u = u(x, K n ) on the 
second track. 

Step 2. Iterate the following steps 3 and 4 for I — 1 to s(n), where step 4 refers to step 
4.1 or 4.2. 

Step 3. On the fourth track, scan the Z-th component (h,i) or (h,i,j) of c r (K n ), where 
h G [l,4]z and i,j G [1, |A ljn | + |domain(S' n )|]z- That is, h is the index in Cm of the Z-th 
quantum gate constructing K n , and i (and j) is the bit number of the wire connected to the 
Z-th gate. 

Step 4.1. When h = 4, if i < j, then carry out the unitary transformation \x,y) 1— > 
\x,x + y mod 2) on the cell-set {i, j} of the second track. If i > j, then carry out the unitary 
transformation \x, y) 1— > \x + y mod 2,y) on the cell-set {i,j} of the second track. 
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Step 4.2. When h ^ 4, carry out the transformation Rh,n on the cell-set {z} of the second 
track. 

Step 5. Empty the fourth and the third tracks. 

Since /C is a ^-uniform QCF of size s, there is a DTM that computes the function 
l n h-» c r (K n ) in time polynomial of s(n). Thus, we construct an SNQTM that carries out 
step 1 in time polynomial of s(n) by using the synchronization theorem, the addition and 
the permutation of tracks, and the dovetailing lemma. Moreover, using the synchronization 
theorem we can construct SNQTMs for steps 3 and 5 that run in time polynomial of s(n). For 
each unitary transformation in step 4, we can construct an SNQTM that carries it out using 
the completion lemma. For example, an SNQTM that carries out the unitary transformation 
Ri^ti is such that the quantum transition function 5 satisfies 

6(q ,0,qi,0,-l) = % , 1,91,1,-1) = cos "ft, 

-% , 0,gi,l,-l) = % , 1,91,0,-1) = shift, 5(q u B,q f ,B,l) = 1, 

S(q f , a, g , a, 1) = 1 (a G {B, 0,1}). 

Similarly, we can also construct SNQTMs that carries out the other unitary transformations. 
Now we can construct an SNQTM that accomplishes step 4 by applying the addition and the 
permutation of tracks, the branching lemma, and the synchronization theorem to SNQTMs 
that carries out their unitary transformations. An SNQTM which carries out step 4.1 or 
4.2 according to h in step 3 can be constructed by the branching lemma, the addition and 
the permutation of tracks, and the dovetailing lemma. We can construct an SNQTM that 
carries out step 2 by the looping lemma. Finally, we can construct the desired QTM M by 
applying the addition and the permutation of tracks, and the dovetailing lemma to SNQTMs 
that carries out steps 1, 2, and 5. Each dovetailed SNQTM can be constructed so that the 
dovetailing conditions can be satisfied. 

It is easy to see that M carries out K n and the computation time of M is a polynomial 
of s(n). From the above, M simulates K, in time polynomial of s(n). QED 

Using Theorem |4.3| and Lemma |5.1| , we investigate the detailed relationships among 



complexity classes between QTMs and QCFs. We shall now define classes of languages 
efficiently recognized by QTMs or QCFs implementing Monte Carlo, Las Vegas, and exact 
algorithms, that is, quantum analogues of the probabilistic complexity classes BPP, ZPP, 
and P. 

We say that a QTM M accepts (or rejects) x G {0, 1}* with probability p if the output 
state 1-0) of M for input state | go, "tape [x], 0) satisfies 

||E T " 1 (tape[x])E f2 (tape[l])|^)|| 2 = p, (or || J B fl (tape[x]) J B f2 (tape[0])|^)|| 2 = p). 

We say that M recognizes a language L with probability at least p if M accepts x with 
probability at least p for any x G L and rejects x with probability at least p for any x j£ L. 
Moreover, we say that M recognizes L with probability uniformly larger than p, if there is a 
constant < rj < 1 — p such that M recognizes L with probability at least p + rj. Let A be 
a subset of C. A language L is in BQP A (or EQP A ) if there is a polynomial time bounded 
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QTM M = (Q,T,,5) that recognizes L with probability uniformly larger than ~ (or with 
probability 1) and range(<5)C A. A language L is in ZQP^ if there is a polynomial time 
bounded QTM M = (Q,T,,5) satisfying the following conditions. 

(1) M recognizes L with probability uniformly larger than |. 

(2) range(5)C A. 

(3) If M accepts (rejects) input x with a positive probability, M rejects (accepts) x with 
probability 0. 

From these definitions, we have obviously EQP A C ZQP^ C BQP^. In what follows, when 
A = PC, we denote BQP A , EQP A , and ZQP A by BQP, EQP, and ZQP, respectively. 

Let M be an SNQTM that recognizes a language L with probability uniformly larger 
than ~ in time t(n), where n is the length of the input of M. Then we can recognize L 
with probability uniformly larger than 1 — e by iterating the computation of M on the 
input k = O(log-) times (e is a positive number independent of the input) and calculating 
the majority of the k answers. Moreover, Bennett et al. || showed that an SNQTM that 
recognizes L with probability uniformly larger than 1— £ in time ct(n) (here, c is a polynomial 
in log - and independent of n) can be constructed. This fact means that the classes BQP 
and ZQP we have now defined are identical with BQP and ZQP defined in [f| ||. 

A definition of recognition of languages by quantum circuits is given as follows. Let K be 
an n-input 2-output quantum circuit and x G {0, 1}". When p K (01\x) = p (or p K (00\x) = p), 
we say that K accepts (or rejects) x with probability p. For any language L n C {0, l} n , we 
say that K recognizes L n with probability at least p\iK accepts x with probability at least 
p for any x G L n and K rejects x with probability at least p for any x G" L n . 

We need to consider circuit families in order to recognize languages including strings with 
different lengths. In what follows, we write L n = Lfl{0, l} n for any language L. We say that a 
QCFK, = {K n }n>i recognizes a language L with probability at least p if K n recognizes L n with 
probability at least p for any n G N. We say that /C recognizes a language L with probability 
uniformly larger than p if there is a constant < i] < 1 — p such that K n recognizes L n with 
probability at least p + r\ for any n. We say that a language L has bounded- error (or exact) 
uniform polynomial size quantum circuits, in symbols L G BUPQC (or L G EUPQC), if 
there is a uniform polynomial size QCF /C = {i^ n }n>i that recognizes L with probability 
uniformly larger than | (with probability 1). Moreover, we say that a language L has zero- 
error uniform polynomial size quantum circuits, in symbols L G ZUPQC, if there is a 
uniform polynomial size QCF /C = {i^ n }n>i recognizing with probability uniformly larger 
than | and satisfying p^i^OOla;) = or p K ^{fdl\x) = for any x G {0,1}*. From these 
definitions we have obviously EUPQC C ZUPQC C BUPQC. 

As is well-known, P is identical with the class of languages that have uniform polynomial 
size Boolean circuits^ [|1|]. The following identical relation holds between complexity classes 
of QTMs and QCFs. This relation means that QTMs and uniform QCFs are equivalent as 
probabilistic machines implementing Monte Carlo algorithms as suggested by Shor [ pQf| . 

2 In this paper, uniform Boolean circuit families mean polynomial time uniform ones. In computational 
complexity theory, more restricted families have been investigated and some of them are also equivalent to 
polynomial time bounded DTMs. 
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Theorem 5.2. BQP = BUPQC. 

Proof. Let L G BQP. Then without loss of generality, we can assume that there is a 
QTM M = (Q, E, S) that recognizes L with probability uniformly larger than | in time p(n), 
where p denotes a polynomial (See Remark 2). This QTM M can be p(n)-simulated by a 
quantum circuit K n of size 0{p 2 {n)) constructed as the proof of Theorem ^?3|. The quantum 
gate G(K n ) can be decomposed into two sorts of quantum gates G\ and Gi as given in the 
proof of Theorem [4.3| , and the array of G\ and G2 in K n can be computed in time polynomial 
in n. Moreover, range(£)C PC by the definition of BQP, so that from the S-matrix of G\ 
we can compute the array of elementary gates in Q-pc decomposing G\ in time independent 
of n. Obviously, G<i can be decomposed into elementary gates in Q?c in time polynomial in 
n. Therefore, there is a DTM which on input l n produces the code c(K n ) in time polynomial 
in n. Thus, /C = {K n } n >i is uniform. From the above, L G BUPQC. 

Conversely, suppose L G BUPQC. Then, for all n G N there is a quantum circuit K n of 
size p{n) based on Qpc which recognizes L n with probability | + 77, where p is a polynomial 
and < r] < i is a constant independent of n. Moreover, there is a DTM M that computes 
the function l n t— > c(K n ) in time polynomial in n. Assume that the length of a bit string x is 
n. Let c(K n ) = (e(Gi), . . . , e(G k ), . . . , e(G p(n) )), where e(G fc ) = ((i, c(6)) , ir k (l)} if G fc = R ifi 
and e(Gfc) = (4, 7r fc (l), vr fc (2)) if G^ = M 2 (N). Now we compute the C^-code c r (K n£ ) of a 
quantum circuit K ne based on Q n such that \\G(K n ) — G(K n<£ )\\ < e from c(K n ) as follows. 
For each k = 1,. . . ,p(n), from the component (i,c(8)) of c(K n ) representing G k = Ri,e in 
K n , we compute an integer m such that \\R%,e — RTnW — ~fn) by Lemma |4T2| , and replace 



the component ((i, c(6*)), vrfe(l)) in c(K n ) by (i, 7Tfc(l)), . . . , (i,7Tfc(l)). It is easy to see that 

" v ' 

m 

the computation time of this algorithm is at most a polynomial in n and log-. Now let 
£ < |. Then the QCF /C £ = {i^n, £ }n>i based on (fo recognizes L with probability at 
least I + f- Next, we consider the ^-size of K n ^ e . For each 1-bit quantum gate Rjj 
(j = 1,2,3, 9 G [0,27r]) constructing K n , the positive integer m determined by Lemma 
P~2| such that \\Rjfi — R™-r\\ — ~Tn\ i s at mos t 0(p 4 (ra)/e 4 ). Thus the ^-size s(n) of i^ n)£ 
is at most s(n) = 0(p 4 (n)/(|) 4 ) x p{n) = 0(p 5 (n)). Therefore, K e is a (^-uniform QCF 
of size s(n). Applying Lemma ^Tl] to /C £ , given as input an n-bit string there is a QTM 
M = (Q, S, S) that carries out K n ^ £ in time Of^f^n))), where q is a polynomial. From the 
proof of Lemma 571 , it is easy to see that range(<5)C PC. Therefore we conclude L G BQP. 

Remark 1. Using the proof of BUPQC C BQP in Theorem |5.2| , we can show the 
existence of a polynomial time bounded universal QTM which simulates any given uniform 
QCF with any accuracy. 

Remark 2. Any polynomial time bounded QTM M can be simulated by a two-tape QTM 
M' whose computation time is exactly a polynomial in the length of the input, using time 
constructible functions to count the number of steps, as follows: (1) M' writes l p ^ on the 
second tape, where n is the length of the input, p(n) is a time constructible polynomial, and 
the computation time of M is bounded by p(n); (2) In every time when M' carries out one 
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step of M on the first tape, M' changes 1 to B on the second tape; (3) When M' completes 
the computation of M, the first tape of M does not change the contents of the first tape any 
more, while M' changes 1 to B on the second tape; (4) if the second tape scans B, then M' 
halts. 

The following theorem can be verified by a proof similar to that of BQP C BUPQC in 



Theorem 5.2, and means that QTMs are not more powerful than uniform QCFs as proba- 



bilistic machines implementing exact or Las Vegas algorithms. 

Theorem 5.3. (1) EQP C EUPQC. 
(2) ZQP C ZUPQC. 

It is open whether the inclusion relations in Theorem |5l| are proper or not. In the proof 



of BUPQC C BQP in Theorem 5.2, we are allowed to replace quantum gates with some 



additional errors, while an analogous argument does not work in Theorem p73 , 

It has been considered that Shor's factoring algorithm is a Las Vegas quantum algorithm. 
We shall show this fact by proving that a certain language corresponding to the factoring 
problem is not only in ZUPQC but also in ZQP. The factoring problem is polynomial time 
Turing reducible to the language FACTOR = { (N, k) \ N has a non-trivial prime factor larger 
than k } and the class of problems solved by Las Vegas algorithms is closed under polynomial 



time Turing reductions. On the other hand, as suggested by Theorem |5.3| , any language in 
ZQP can be recognized most typically by a Las Vegas quantum algorithm. Thus, in order 
to verify that Shor's factoring algorithm is a Las Vegas quantum algorithm, it is sufficient 
to show that FACTOR is in ZQP. 

Theorem 5.4. FACTOR e ZQP. 

Proof. Let (N, k) be an input of the algorithm to be constructed. In the following 
algorithm that recognizes FACTOR, we use a Las Vegas primality testing algorithm (for 
example, such an algorithm can be constructed by the algorithm of Solovay and Strassen 
p3| and the algorithm of Adleman and Huang [fJJ) and Shor's factoring algorithm [20|. At 



first, let LIST = {N}. 

Step 1. Carry out steps 2-4 while the greatest number in LIST is larger than 1. 

Step 2. For the greatest number N' in LIST, check whether N' is prime or not by the 
Las Vegas primality testing algorithm. If N' is judged to be prime, then go to step 3. If N' 
is judged to be composite, go to step 4. Otherwise, output a special mark '?' and end. 

Step 3. If N' > k then output 1 and end. Otherwise, output and end. 

Step 4. On input N', carry out Shor's factoring algorithm. If a factor p is found, then 
replace N' in LIST by p and N'/p, and go to step 2. If no factor is found, output '?' and 
end. 

Step 2 can be implemented by a polynomial time bounded SNQTM, because ZPP is 
included in ZQP. Step 3 can also be implemented by a polynomial time bounded SNQTM 
using the synchronization theorem. In step 4 we can divide Shor's factoring algorithm into 
three processes: (1) a process that produces a factor candidate of N'\ (2) a process that 
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iterates process (1) j = 0((logN) 2 ) times in order to obtain j factor candidates; (3) a process 
that produces a true factor if the factor exists in the j candidates, and otherwise produces 
'?'. Note that process (1) also includes a deterministic algorithm performed efficiently for the 
case where N' is an even number or a prime power. We have shown that the discrete Fourier 
transform can be done by a uniform polynomial size QCF in this section. Using a similar way, 
we can make sure that process (1) can be carried out by a uniform polynomial size QCF /C. 
Let e > be a small constant independent of N. Similar to the proof of Theorem |5.2| , for any 
K n in /C, the C^-code of a quantum circuit K n>e based on Qn such that \\G(K n ) — G(K Ht£ ) \ \ < 
e can be computed in time polynomial in n. Thus K e = {K ntE } n >i is ^-uniform. We can 
construct an SNQTM M\ that carries out K, £ by Lemma |5.1| . An SNQTM M2 which carries 
out process (2) can be constructed by inserting M 1 into a looping machine j times. We can 
construct an SNQTM M 3 that carries out process (3) by the synchronization theorem, and 
construct an SNQTM M implementing Shor's factoring algorithm by applying the addition 
and the permutation of tracks and the dovetailing lemma to Mi and M3. 

In step 4 the probability that produces '?' is less than 1/N, since by one round of process 
(1) we get a true factor with probability at least £1(1/ log N) and we repeat process (1) 
0((log V) 2 ) rounds to reduce the probability that produces '?' up to less than 1/N. In step 
2, by iterating the Las Vegas primality testing a polynomial number of times we can make 
the probability that produces '?' less than 1/N. Moreover, steps 2-4 will be carried out at 
most log A" times. Thus the above algorithm produces '?' with probability at most rj < 1/2, 
where 77 is independent of the input. Now it is easy to conclude that FACTOR G ZQP. 
QED 

Remark. From Theorems |5.3| and |5.4| it follows that FACTOR G ZUPQC. However, this 



fact can be verified in a more straightforward argument. In fact, we have verified that Shor's 
factoring algorithm (step 4) in the algorithm of the proof of Theorem |5.4| can be implemented 



by a uniform polynomial size QCF. On the other hand, the other part of the algorithm can be 
written as a classical probabilistic algorithm. Coin flips can be implemented by Hadamard 
gates, and the classical deterministic part can be implemented by Toffoli gates. These two 
sorts of gates can be decomposed into 0(1) elementary gates in £pc- Thus, the other part 
of the algorithm can be also implemented by a uniform polynomial size QCF. 

By analogous arguments, we can also show that Shor's algorithm for the discrete loga- 
rithm problem defined in |2D| is a Las Vegas quantum algorithm. 



Considering the proof of Theorem |5T4] , it might be expected that ZQP is equal to 
ZUPQC. However, we should notice that the above algorithm uses a Las Vegas type primal- 
ity testing to produce a correct answer. This primality testing prevents us from producing 
incorrect answers. But this check-algorithm is classical Las Vegas one. A classical Las Ve- 
gas algorithm can be exactly carried out by a Las Vegas type QTM, since a polynomial 
time bounded probabilistic Turing machine can be exactly simulated by a polynomial time 
bounded QTM. Now, in the case where such a check-algorithm is carried out by a uniform 
QCF, it is not known whether we can implement this algorithm by a QTM. Thus, even if a 
quantum algorithm is carried out efficiently by a Las Vegas type uniform QCF, we cannot 
say that the algorithm is efficiently carried out by a Las Vegas type QTM. 
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The state transition of a QTM is determined by the quantum transition function, finite 
numbers of complex numbers, while in order to characterize that of a QCF, we can use 
infinite numbers of complex numbers even under the uniformity condition. This suggests 
that some QCF cannot be simulated exactly by a QTM. In fact, we can show that a QCF 
carrying out the discrete Fourier transform cannot be exactly simulated by any QTM as 
follows. 



Proposition 5.5. A QCF K, = {K n } n >i carrying out the discrete Fourier transform 

1 2 ^ 1 (2ixiac\ , . 
\a) i— > —= > cxp c). 



c=0 

where a — 0, . . . ,2 n — 1, cannot be exactly simulated by any QTM. 

Proof. Let Q be the algebraic closure of Q. Let F(ai, . . . ,a m ) be the field generated 
by ai,... , a m over a field F. The range of the quantum transition function of a QTM 
M = (Q, E, 5) consists of finite numbers of complex numbers {a±, . . . , a m }. Thus, the set 
{(C'\Ml\C) \C',Ce C(Q, E), t G Z> } is included in an extended field Q(a 1? . . . , a m ) of Q. 
On the other hand, the 2™-dimensional unitary matrix representing the quantum gate G(K n ) 
determined by K n contains the complex number e~ as the components. Therefore, it is 
sufficient to show the relation {e^ \ n G N} % Q(«i, . . . , a m ). The dimension of the vector 
space Q(e"2 i , . . . , e"^) = Q(e^) over Q is 2™~ 1 . Moreover, Q(e^) C Q. Henceforth, let 
Fk = Q(«i, • • • , ctfe) fl Q. Now, we shall show that F k is a finite extension of Q by induction 
on k. When k — 0, it is trivial. Suppose that F k is a finite extension of Q. If F k +i = Fj,, 
then it is easy to see that F k+1 is a finite extension of Q. Now, suppose that F k+ i ^ F k and 
let 7 G F k+ i \ F k . Then there is a non-constant rational expression f(x) over Q(ai, . . . , a k ) 
such that 7 = /(oifc+i). Since 7 is in Q \ Q, there is a minimal polynomial g over Q of 7, 
so that we have g o /(a fe+1 ) = (7(7) = 0. It follows that a k+ \ is algebraic over Q(«i, . . . , a k ). 
Supposing that / is the dimension of the vector space Q(«i, . . . , a k+ i) over Q(ai, . . . , a k ), 
the degree of 7 over Q(«i, . . . , a k ) is at most /. Let hi be the minimal polynomial over 
Q(«i, . . . , ak) of 7. Since 7 is also algebraic over Q and Q C Q(«i, . . . , a k ), the polynomial 
hi divides the minimal polynomial hi over Q of 7. The coefficients of hi are in Q, since hi is 
uniquely decomposable over Q. Thus, the coefficients of hi are in F k , so that the degree of 
7 over F k is at most /. Therefore, F k +i is a finite extension of F k . By inductive hypothesis, 
F k+ i is a finite extension of Q. Therefore, Q(ai, . . . , a m ) fl Q is a finite extension of Q, and 
hence we have {e^ \ n G N} % Q(«i, . . . , a m ). QED 

Thus, there is a fair chance that EQP ^ EUPQC or that ZQP ^ ZUPQC. 

Next we introduce the notion of the uniformity of QCFs based on finite subsets of Q u 
and consider classes of languages recognized by such QCFs. 

Assume that a finite set Q of quantum gates is indexed as Q = {Gi, . . . ,Gi}, where Gi is an 
rij-bit quantum gate for i — 1, . . . , /. Let K = (G im , n m ), . . . , (G^, 7Ti) be a quantum circuit 
based on Q. Then the Q-code cg(K) is defined to be the list of finite sequences of natural 
numbers, ({i u 7Ti(l), 7Ti(2), . . . , ^(n^)), . . . , (i m , vr m (l), vr m (2), . . . , n m (n irn ))) . Moreover, let 
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K be a &;-input m-output n-bit quantum circuit K = (K , Ai, A 2 , S) based on Q, where 
[l,n]z \ A x = {«!, . . . ,i n -k} and A 2 = {ji, . . . ,j m }. Then the (?-code of K, denoted by 
cg(K), is defined by the list of finite sequences of natural numbers, 

c e( K ) = («*i, s (h)), ■■■, (in-k, S(i n -k)}),cg(K), (j 1} . . .,j m )). 

A QCF /C = {K n } n >i of size s based on Q is said to be Q -uniform if the function l n \— > cg(K n ) 
is computable by a DTM in time p(s(n)) for some polynomial p. Furthermore, a QCF K, is 
said to be semi-uniform if there is a finite set Q C Q u such that /C is (/-uniform. Now the 



following lemma holds similar to Lemma E7L . 



Lemma 5.6. For any semi-uniform QCF K,, there exist a polynomial p and a QTM M 
which simulates JC in time p(s(n)), where s is the size of K. 

We say that a language L has bounded- error (or exact) semi-uniform polynomial size 
quantum circuits, if there is a semi-uniform polynomial size QCF /C = {K n } n >i that recog- 
nizes L with probability uniformly larger than | (with probability 1). In this case, we write 
L G BSPQC (or L G ESPQC). We say that L has zero-error semi-uniform polynomial size 
quantum circuits, if there is a semi-uniform polynomial size QCF /C = {K n } n >i recognizing 
L with probability uniformly larger than | and satisfying p x w(00|a;) = or p K ^(01\x) = 
for any x G {0, 1}*. In this case, we write L G ZSPQC. From these definitions we have 
obviously ESPQC C ZSPQC C BSPQC. 

The following theorem shows that semi-uniform polynomial size QCFs are equivalent to 
polynomial time bounded QTMs whose transition amplitudes are arbitrary complex num- 
bers. 

Theorem 5.7. (1) BQP C = BSPQC. 

(2) EQP C = ESPQC. 

(3) ZQP C = ZSPQC. 

Proof. We shall show only statement (1). Statements (2) and (3) can be proved similarly. 

Let L G BQP C . Then, there is a QTM M = (Q, E, S) that recognizes L with probability 
uniformly larger than | in time p(n), where p denotes a polynomial. For any n G N there is 
a quantum circuit K n of size 0(p 2 (n)) that p(rz)-simulates M by Theorem |4.3| . We use the 
same notations as the proof of Theorem [4.3| by identifying K n with K in this proof. Then 
the quantum gates G\ and G2 constructing K n are decomposable by at most q(n) gates in 
a finite subset Q of Q u , where q(n) is a polynomial. If Q is indexed, there is a DTM that 
computes the function l n 1— > cg(K n ) in time polynomial in n by the construction of the 
quantum circuit in Theorem |4.3| . Thus, /C = {K ri } n >i is a semi-uniform polynomial size 
QCF that recognizes L with probability uniformly larger than |. 

Conversely, suppose L G BSPQC. Then, there is a semi-uniform polynomial size QCF 
/C = {K n } n >i that recognizes L with probability uniformly larger than |. By Lemma |5lj| , 
given as input an n-bit string, there is a QTM M that carries out K n in time 0(p(n)), where 
p is a polynomial. Thus, M recognizes L with probability uniformly larger than |. QED 
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Remark. Unlike Theorem |57|, the proof of the existence of a quantum circuit that recog- 
nizes L G BQP C in Theorem |5.7| is non-constructive. For example, if a language L can be 
recognized with probability uniformly larger than | by a polynomial time bounded QTM M, 
there is a semi-uniform polynomial size QCF /C that recognizes L with probability uniformly 
larger than |, but we do not know how to find out K from M efficiently 

Similar to the proof of Theorem |5.7| , by modifying the proof of Theorem [O] non- 
constructively, we can show that SNQTMs (and QTMs with the binary tapes by Lemma 
p.2|) are equivalent to multi-tape QTMs as machines implementing not only Monte Carlo 
algorithms but exact ones from the viewpoint of the polynomial time complexity. 

Theorem 5.8. For any QTM M, there is an SNQTM M' (depending on M) that given 
any positive integer t, simulates M fort steps. Moreover, if M is in PC, then so is M' . 

Adleman, DeMarrais, and Huang [l] have shown that if all complex numbers are allowed 
as transition amplitudes of QTMs, for any language L, there exists a language V e BQP C 
which is Turing equivalent to L. As a result, BSPQC is also a set with uncountable 
cardinality. 

Figure 5 summarizes the inclusions among the classes of languages which we have dis- 
cussed in this section. 



BSPQC = BQP C 




BUPQC = BQP 



ZSPQC = ZQP C 



ESPQC = EQP C EUPQC 



ZUPQC 



ZQP 




BPP 



Figure 5 : The inclusions among the classes of languages discussed in this section. 



Appendix A. The generalization of the construction of Theorem [4.3| to multi- 
tape QTMs 



We can extend the construction of Theorem O to multi-tape QTMs. In what follows, let 
a — (ai, . . . , a k ), dj = (aji, . . . , aj k ), and E = Ei x • • • x E fc . Let M = (Q, E, 6) be a fc-tape 
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QTM. This time we use Zo + Z^=i(2£ + l)(2+ |~log|£j|~|) wires for the simulation. Conditions 
(i) and (ii) in the proof of Theorem |4l| are modified as follows; we denote 

\q; a u 2; a 21 0; ct 3 iO; • ■ ■ ; a lk 2; a 2k 0] cr 3fc 0), ...,\q; cr n 0; <7 21 0; a 31 2; ■ ■ ■ ; cr lfe 0; cr 2fc 0; a 3k 2) by 

\q; a n cr 21 a 31 ; ■ ■ ■ ; ai fc cr 2fc cr 3fc ; -1, • • • , -1), • • • , |g; 011021C31; • • • ; Vik&2kVzk] 1, • • • , 1) 
respectively. 

(i') Gx\w Pt <r x ,<?,<r z ) = Ivp,^,?,^), where 

|Wp 7 <f lj5 y- 3 ) = |p;anO;cril;cr 3 iO; • ■ ■ ;cri fc 0;o- 2 l;cr 3 fc0), 



■(.» 



p>fi 



,*,<«) = S ^(p,^9,^^)l<?;o-nno-3i;---;crifcT"fcO"3fc;rf) 



q,T,d 



for any (p, <T l5 a, 03) E Q x S 3 ; the summation XL-fd is taken over all (q, r, d) G Q x £ x 

hM]|- 

(ii') Gi|/i) = |/i) for each vector \h) in the subspace if of C 20 spanned by 

fc-i 1 

l + 2x^5 J = -(2 fc + l) 
3=0 2 

types of vectors, where I = £j =1 (2t + 1)(2 + [log |E fc |"|). 

(1) |g; ctiiSu; 021S21; 031S31; • • • ; ai k si k ] o 2k s 2k \ cr 3fc s 3fc ), _ 

where §2 ^ (1, . . . , 1) and none of sij, s 2 j, s 3 j are equal to 2 for some i G [1, fc]z- 

(2) For each j G [1, k] z and (A-j+i, . . . , D k ) G [1, 2] z x [-2, 2] J Z ~\ we have 

1 JA-i+b-A \ 

I P,0-ll,(Tl,(T31,...,(T 1 ( fc _j),(T fc „j,0-3( fc _ J ),/l(_D fe _j + 1 ),...,h(D fc )/ 

= H [<*(P> ^ 9) ^ rf )k; CTuTiC73i; • • • ; Cri(k-j)Tk-jCT3{k-j)) 

®\f(D k _ j+1 ); ■■■; f(D k ); d u . . . , d k _j, g(D k _ j+1 ), . . . , g(D k )} ], 

where the summation is taken over q G Q, r m G E m , d m G [— 1, l]z for me [1, fc — j]z, and 
r n G S(D n ), d n G S'(D n ) for n G [A; — j + 1, fc]. Here, for z G [A; — j + 1, fc]z, we have 

<7j, Tj, Uij, a 2i , cr 3i if A = ±2, ( o-iicr 2 jCr 3 ; if A = ±2, 

, , ^ . 1 o- lij a 2 i } o- i if A = — 1, ,/p) >, _ I <7u<T2iTi if A = -1, 

'' » aw, cr i? crgj ifA = 0, /l \ (raWx if A = 0, 

0"i, 0"2i, 0"3i if A = 1, I na 2 i(Tzi if A = 1, 

/ =pl if A = ±2, c^rn-/ if A = ±2, 

SW 1 di-A ifAG[-l,l] z , [ l) 1 Si ifAG[-l,l] z , 



and S"(A 



if A = ±2 

{-1,0} ifA = -l 

{-1,0,1} ifA = 0, 

{0, 1} if A = I- 
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Let W = {\w Pt< r u ff }< r 3 )\ (p, a[,a, <f 3 ) e Q x S 3 }- 1 - 1 and V = {\v p>( f u <? >( r 3 )\ (p,ai,a,<f 3 ) e 
Q x E 3 } . By the unitarity conditions of the quantum transition functions of multi-tape 
QTM |I7| , the subspaces W, V and H are all orthogonal one another and it is verified that 
{|^p,cri,CT,cri)} is an orthonormal system of V. Thus, there exists a quantum gate G\ satisfying 
the above condition. The subcircuit K simulating one step of M consists of (2t — l) k quantum 
gates G\ and a reversible Boolean gate G2, which works as the case of single tape QTMs, and 
for «"]_, . . . ,i k — 0, 1, . . . , 2t — 2 the {J2j=x ij(2t — l) fc_J )-th G\ is connected with first l wires 



and the wires of bit numbers lo + iih + 1, . . . , lo + hh + h — 1, /o + (2t — l)l\ +^2 + 1, 



Jo + 



(2t-l)h+i 2 l2+h-l, ■ ■ ■ ,/o+(2£-l)(£-=! g+^fc+1, . . . ,Z +(2t-l)(E*=i lj)+ikk+l k -l. 
Here, lj = 2 + [log |Sj|]. In the case of k = 2, the subcircuit K is illustrated in Figure 6. 
Similar to the case of single tape QTMs, we can see that t consecutive subcircuits t-simulates 
M. Therefore, Theorem |4.3| holds for arbitrary A;-tape QTMs. 

G 2 z 




cell P (-t,l) 



(*,1) H,2) (t,2) 



Figure 6 : The quantum circuit K that simulates one step of a two-tape QTM M 
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